Mayswind Ezbookkeeping
4 CVEs affecting Mayswind Ezbookkeeping. Latest disclosed: 2026-09-20. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-57604 | Critical | 9.8 | 2025-02-12 | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component. |
CVE-2026-94112 | Medium | 6.8 | 2026-09-20 | mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window. Att… |
CVE-2025-65519 | Medium | 6.5 | 2026-02-18 | mayswind ezbookkeeping versions 1.2.0 and earlier contain a critical vulnerability in JSON and XML file import processing. The application fails to validate ne… |
CVE-2024-57603 | Medium | 6.3 | 2025-02-12 | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the lack of rate limiting. |